Skip to main content
Taha1
Taha1
Explorer
November 29, 2022
Solved

A duplicate entry already exists VIP

  • November 29, 2022
  • 3 replies
  • 16342 views

Hello EvryOne

 

We are using FortiGate201F v6.4.11

We have an internal web based application and I want my users to be able to connect to that application from outside our network.

So I wanted to NAT between our public IP and private IP

So am getting the below error:

 

A duplicate entry already exists.

The extip is overlapped with the gateway of static route.

 

So I searched the firewall I found that the same Public IP is defined as Gateway Address .

 

am not sure what that’s mean ?

Would any one kindly help.

 

Thanks.

Best answer by Toshi_Esumi

That generally means the static route was misconfigured whoever configured it. You need to judge if you can/should remove it based on the destination subnet.

 

Toshi

3 replies

anikolov
Staff
anikolov
Staff
November 29, 2022

Helo Taha1,

 

What is the subnet that you are using for a gateway? You can choose some other IP address with which you will do the VIP. Can you please share the related configuration for the VIP that you are trying to use? Interface, static route, VIP policy, firewall policy, static route?

 

Since I am asking you to provide parts of the configuration, some malicious user can read this, so you can mask the real IPs or use trusted host. 

 

Regards,

 

    Toshi_Esumi
    SuperUser
    Toshi_EsumiAnswer
    SuperUser
    November 29, 2022

    That generally means the static route was misconfigured whoever configured it. You need to judge if you can/should remove it based on the destination subnet.

     

    Toshi

      YHC
      YHC
      Explorer
      October 23, 2023

      Hi,

       

      I have the same issue.

      Here is our static route setting:

       

      圖片 1.png

      Could you advise how to correct the problem?  

      Thank you.

      Toshi_Esumi
      SuperUser
      Toshi_Esumi
      SuperUser
      October 23, 2023

      What is the VIP you tried configuring? CLI might be easier to paste into a post. "config firewall vip" then "show".

       

      Toshi

        Taha1
        Taha1Author
        Explorer
        December 21, 2022

        Dear All,

        thanks alot for the support

        the issue was related to the Static Route .

        we have fixed it and every thing is fine now.

         

        thanks.

        wcs
        wcs
        New Member
        September 6, 2023

        the problem same with me, everything is fine before i upgrade the fortigate from  5.6.3 to v7.0.12,

        can you share with me what do you do to solve this isseu

         

        thanks

        Toshi_Esumi
        SuperUser
        Toshi_Esumi
        SuperUser
        September 7, 2023

        As I said two years ago, if you "found that the same Public IP is defined as Gateway Address", "That generally means the static route was misconfigured whoever configured it. You need to judge if you can/should remove it based on the destination subnet."

         

        Toshi

        Terms & ConditionsAccessibility statement